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AMENDMENTS TO THE CLAIMS : 
Please amend the claims as follows. The claims are in the format as required by 35 
C.F.R. §1.121. 

1 . (Currently Amended) A device for dynamically allocating network bandwidth on a per 
user basis comprising: 
a processor; 

a first network interface coupled to the processor; 
a second network interface coupled to the processor; 
a storage medium accessible by the processor; 

a set of computer instructions stored on the storage medium, executable by the 
processor to: 

retrieve a set of user profiles, wherein each user profile corresponds to a specific 
user in a set of users; 

establish at least one network bandwidth limit for each user in the set of users 
based on the corresponding user profile for that user; 

for each user in the set of users, regulate network bandwidth usage associated 
with that user based on the at least one network bandwidth limit established for that 
user; 

receive a network communication from a network application running on a first 
user device communicatively coupled to the first network interface, wherein the network 
communication is destined for a second device on a second network coupled to the 
second network interface: 

retrieve a first user profile for a first user associated with the first user device 
from an authentication database based on user credentials provided by the first user: 

initiate a control session for the first user: 

based on attributes in the first user profile, establish user specific rules and 
conditions that are bound to the first user during the control session based on the first 
user device and the user credentials provided by the first user for the control session: 
and 

dynamically update the at least one network bandwidth limit for at least one user 
from the set of users to account for the first user gaining access to the second network . 
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2. (Currently Amended) The device of Claim 1 , wherein the computer instructions 
are further executable to dynamically update the at (east one network bandwidth limit bas e d on 
a new us e r prof ile fora -each user in the set of users. 

3. (Currently Amended) The device of Claim 1 , wherein the computer instructions 
are further executable to dynamically update the at least one network bandwidth limit based-en 
for each user in the set of users to account for a new user connecting to the device. 

4. (Currently Amended) The device of Claim 1 , wherein the computer instructions 
are further executable to dynamically update the at least one network bandwidth limit for at 
least one user based on a time of day. 

5. (Previously Presented) The device of Claim 1 , wherein the computer instructions 
are further executable to dynamically update the at least one network bandwidth limit based on 
utilization averaging for the corresponding user, 

6. (Previously Presented) The device of Claim 1 , wherein the computer instructions 
are further executable to dynamically update the at least one network bandwidth limit by 
modifying a traffic control rule containing the at least one network bandwidth limit. 

7. (Previously Presented) The device of Claim 1 , wherein the computer instructions 
are further executable to meter network bandwidth usage on a per user basis. 

8. (Previously Presented) The device of Claim 1, wherein the computer instructions 
are further executable to establish a traffic control rule for each user containing the at least one 
network bandwidth limit for that user. 

9. (Previously Presented) The device of Claim 8, wherein the computer instructions 
are further executable to dynamically update the at least one network bandwidth limit for the at 
least one user by updating the traffic control rule for the at least one user. 
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10. (Original) The device of Claim 9, wherein the computer instructions are further 
executable to access each traffic control rule from an IP table based on an indicator associated 
with each traffic control rule. 

1 1 . (Original) The device of Claim 10, wherein the indicator comprises a MAC 
address. 

12. (Original) The device of Claim 1 0, wherein the indicator comprises an IP 
address. 

13. (Currently Amended) The device of Claim 1 , wherein the computer instructions 
are further executable to: 

r e c e ive a n e twork commun i cat i on from a f i rst us e r from the s o t of us e rs ov e r th e first 
n e twor k in t e rfac e dest i n e d for a n e twork connoctod - te - th e s e cond n e twork int e rface; 

access a traffic control rule for the first user that includes an upload network bandwidth 
limit for the first user; and 

determine if the network communication causes the upload network bandwidth limit to 
be exceeded. 

14. (Currently Amended) The device of Claim 13, wherein the computer instructions 
are further executable to receive the network communication from the first user over a wireless 
network. 

15. (Previously Presented) The device of Claim 1, wherein the computer instructions 
are further executable to: 

receive a network communication over a network connected to the second network 
interface destined for a first user from the set of users; 

access a traffic control rule for the first user that includes a download network bandwidth 
limit for the first user; and 

determine if the network communication causes the download network bandwidth iimit to 
be exceeded. 
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16. (Original) The device of Claim 15, wherein the computer instructions are further 
executable to receive the network communication from the user over a wireless network, 

17. (Original) The device of Claim 1, wherein the computer instructions are further 
executable to monitor sessions on per user basis. 

18. (Previously Presented) The device of Claim 1 , wherein the computer instructions 
are further executable to: 

prioritize network bandwidth allocations for networked applications for at least one user 
based on the corresponding user profile for that user. 
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19. (Currently Amended) A device for allocating network bandwidth on a per user 
basis comprising: 

a computer readable storage medium; 

a set of computer instructions stored on the computer readable storage medium, 
executable by a processor to: 

retrieve a set of user profiles, wherein each user profile corresponds to a specific 
user in a set of users; 

establish at least one network bandwidth limit for each user in the set of users 
based on the corresponding user profile for that user; 

for each user in the set of users, regulate network bandwidth usage associated 
with that user based on the at least one network bandwidth limit established for that 
user; 

receive a network communication from a first user device communicatively 
coupled to the device, wherein the network communication is destined for a second 
device on a network communicatively coupled to the device: 

retrieve a first user profile for a first user associated with the first user device 
from an authentication database based on user credentials provided by the first user: 

initiate a control session for the first user: 

based on attributes in the first user profile, establish user specific rules and 
conditions that are bound to the first user during the control session based on the first 
user device and the user credentials provided by the first user for the control session: 
and 

dynamically update the at least one network bandwidth limit for at least one user 
from the set of users to account for the first user gaining access to the network . 

20. (Currently Amended) The device of Claim 19, wherein the computer instructions 
are further executable to dynamically update the at [east one network bandwidth limit based on 
a - n e w H^ s ep f>roffl e-for a- each user in the set of users, 

21 . (Currently Amended) The device of Claim 19, wherein the computer instructions 
are further executable to dynamically update the at least one network bandwidth limit based on 
for each user in the set of users to account for a new user connecting to the device. 
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22. (Currently Amended) The device of Claim 19, wherein the computer instructions 
are further executable to dynamically update the at least one network bandwidth limit for at 
least one user based on a time of day. 

23. (Previously Presented) The device of Claim 1 9, wherein the computer 
instructions are further executable to dynamically update the at least one network bandwidth 
limit based on utilization averaging for the corresponding user, 

24. (Previously Presented) The device of Claim 19, wherein the computer 
instructions are further executable to dynamically update the at least one network bandwidth 
limit by modifying a traffic control rule containing the at least one network bandwidth limit. 

25. (Previously Presented) The device of Claim 19, wherein the computer 
instructions are further executable to meter network bandwidth usage on a per user basis, 

26. (Previously Presented) The device of Claim 19, wherein the computer 
instructions are further executable to establish a traffic control rule for each user containing the 
at least one network bandwidth limit for that user. 

27. (Previously Presented) The device of Claim 19, wherein the computer 
instructions are further executable to dynamically update the at least one network bandwidth 
limit for the at least one user by updating the traffic control rule for the at least one user, 

28. (Original) The device of Claim 27, wherein the computer instructions are further 
executable to access each traffic control rule from an IP table based on an indicator associated 
with each traffic control rule. 

29. (Original) The device of Claim 28, wherein the indicator comprises a MAC 
address. 

30. (Original) The device of Claim 28, wherein the indicator comprises an IP 
address. 
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31 . (Currently Amended) The device of Claim 1 9, wherein the computer instructions 
are further executable to: 

r e ceiv e a network commun i cat i on from a fi rst us e r from th e s e t of users over a f i rst 
n e twork int e rfac e destined for a n e twork conn e ct e d to a s e cond network interface; 

access a traffic control rule for the first user that includes an upload network bandwidth 
limit for the first user; and 

determine if the network communication causes the upload network bandwidth limit to 
be exceeded. 

32. (Currently Amended) The device of Claim 31 , wherein the computer instructions 
are further executable to receive the network communication from the first user over a wireless 
network. 

33. (Currently Amended) The device of Claim 19, wherein the computer instructions 
are further executable to; 

r e ceiv e a n e twork commun i cation over a n e twork connected to a first network interface 
destin e d for a f i rst user from tho sot of users ? 

access a traffic control rule for the first user that includes a download network bandwidth 
limit for the first user; and 

determine if the network communication causes the download network bandwidth limit to 
be exceeded. 

34. (Currently Amended) The device of Claim 33, wherein the computer instructions 
are further executable to receive the network communication from the first user over a wireless 
network. 

35. (Original) The device of Claim 1 9, wherein the computer instructions are further 
executable to monitor sessions on per user basis. 

36. (Previously Presented) The device of Ciaim 1 9, wherein the computer 
instructions are further executable to: 

prioritize network bandwidth allocations for networked applications for at least one user 
based on the corresponding user profile for that user. 
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37. (Currently Amended) A method for allocating network bandwidth on a per user 
basis comprising: 

retrieving a set of user profiles, wherein each user profile corresponds to a specific user 
in a set of users , wherein each user profile is retrieved from an authentication database based 
on user credentials provided by that user in connecting to a control device through a user 
device associated with that user, and wherein each user profile contains an arbitrary number of 
attributes specifying bandwidth limitations for the corresponding specific user; 

based on the arbitrary number of attributes in each user profile, establishing user 
specific rules and conditions that are bound to each user during a control session based on the 
user device associated with that user and the user credentials provided by that user for the 
control session, wherein the user specific rules include at least one network bandwidth limit for 
e ach us e r in th e s e t of us e rs based on tho - corresponding us e r profi le for that user; 

for each user in the set of users, regulating network bandwidth usage associated with 
that user based on the at least one network bandwidth limit established for that user; and 

dynamically updating the at least one network bandwidth limit for at least one user from 
the set of users. 

38. (Currently Amended) The method of Claim 37, further comprising: 
dynamically updating the at least one network bandwidth limit based on a now usor 

profile for a- each user in the set of users. 

39. (Currently Amended) The method of Claim 37, further comprising: 
dynamically updating the at least one network bandwidth limit based on for the at least 

one user from the set of users to account for a new user connecting to the control device. 

40. (Currently Amended) The method of Claim 37, further comprising dynamically 
updating the at least one network bandwidth limit for at least one user based on a time of day. 

41 . (Previously Presented) The method of Claim 37, further comprising dynamically 
updating the at least one network bandwidth limit based on utilization averaging for the 
corresponding user. 
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42. (Previously Presented) The method of Claim 37, further comprising dynamically 
updating the at least one network bandwidth limit by modifying a traffic control rule containing 
the at least one network bandwidth limit. 

43. (Previously Presented) The method of Claim 37, further comprising metering 
network bandwidth usage on a per user basis. 

44. (Previously Presented) The method of Claim 37, further comprising establishing 
a traffic control rule for each user containing the at least one network bandwidth limit for that 
user. 

45. (Previously Presented) The method of Claim 37, further comprising dynamically 
updating the at least one network bandwidth limit for the at least one user by updating the traffic 
control rule for the at least one user. 

46. (Original) The device of Claim 45, further comprising accessing each traffic 
control rule from an IP table based on an indicator associated with each traffic control rule. 

47. (Original) The method of Claim 46, wherein the indicator comprises a MAC 
address. 

48. (Original) The method of Claim 46, wherein the indicator comprises an IP 
address. 

49. (Currently Amended) The method of Claim 37, further comprising: 
receiving a network communication from a first user from the set of users over a first 

network interface of the control device, wherein the network communication is destined for a 
network connected to a second network interface of the control device : 

accessing a traffic control rule for the first user that includes an upload network 
bandwidth limit for the first user; and 

determining if the network communication causes the upload network bandwidth limit to 
be exceeded. 
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50. (Currently Amended) The method of Claim 49, further comprising receiving the 
network communication from the first user over a wireless network. 

51 . (Currently Amended) The method of Claim 37, further comprising: 

receiving a network communication over a network connected to a first network interface 
of the control device, wherein the network communication is destined for a first user from the 
set of users; 

accessing a traffic control rule for the first user that includes a download network 
bandwidth limit for the first user; and 

determining if the network communication causes the download network bandwidth limit 
to be exceeded. 

52. (Currently Amended) The method of Claim 51, further comprising further 
comprising receiving the network communication from the first user over a wireless network. 

53. (Original) The method of Claim 37, further comprising monitoring sessions on 
per user basis. 

54. (Previously Presented) The method of Claim 37, further comprising prioritizing 
network bandwidth allocations for networked applications for at least one user based on the 
corresponding user profile for that user. 
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55. (Previously Presented) A device comprising a set of computer instructions stored 
on a computer readable storage medium, the computer instructions executable by a processor 
to: 

establish user specific rules and conditions including a network bandwidth limit for a-the 
user based on attributes in a user profile for the user; 

receive a first network communication from a user device associated with the user, 
wherein the network communication includes user credentials of the user and device 
information of the user device associated with the user : 

retrieve the user profile for the user from an authentication database based on the user 
credentials of the user, wherein the user specific rules and conditions are bound to the user 
during a control session based on the device information of the user device associated with the 
user and the user credentials of the user provide by the user for the control session; 

determine if the first network communication causes the network bandwidth limit to be 
exceeded; 

if the first network communication causes the network bandwidth limit to be exceeded, 
drop the network communication; and 

dynamically update the network bandwidth limit for the user. 

56. (Previously Presented) The device of Claim 55, wherein the computer instructions 
are further executable to establish a traffic control rule for the user containing the network 
bandwidth limit. 

57. (Original) The device of Claim 56, wherein the computer instructions are further 
executable to access the traffic control rule from an IP table based on an indicator. 

58. (Original) The device of Claim 57, wherein the indicator comprises a MAC address 
and an IP address associated with the user. 

59. (Previously Presented) The device of Claim 55, wherein the user profile specifies 
network application priorities for networked applications, 

60. (Original) The device of Claim 55, wherein the user connects to the device via a 
network comprising a wireless network. 


